skysight-inc/HackerNews huggingface dataset:
Return Oriented Programming (ROP) can bypass the non-executable stack protection, since existing "gadgets" from program memory are executed rather than attacker-provided shellcode.

However the stack protection will probably require a separate information leak (to find the canary value) or arbitrary write (to overwrite it) to bypass. Unless the attacker is fortunate to find an unprotected function which the compiler missed, or a value that can be overwritten which changes the control flow and isn't protected by the canary.

ASLR is also a decent mitigation against ROP, and requires an information leak so the exploit code can calculate the memory offset to find the library gadgets.

In short, ROP isn't the solution to all the mitigations the parent posted; in fact ASLR is designed to make ROP harder to exploit.
Real feedback from top VCs on a real startup
We need electric cows!
Per capita? NYC is 2x larger than any other city.
Hacker news comment sections on articles about semiconductors always seems to be full of people talking authoritatively about things they clearly don't understand. And this is all visible to someone who only majored in computer engineering and got basic training in transistors and logic design who's day job is now in software. I can only imagine the people who actually know transistors cringing in here (and thus avoid commenting).
The rules might not apply, but the subject matter is avoided all the same for commercial reasons, since the audience finds it very sensitive.

The rules, of course, exist as a reflexion of the sensibilities of the people.

It's similar to how in Germany anything related to the Third Reich is treated with the utmost sensitivity, with many rules; these rules exist as the people willed it so. The end result was that the videogame Wolfenstein 3D had to be significantly edited ere it could be legally sold on the German market, as it depicted Third Reich soldiers in accurate uniforms, which was considered too sensitive, even though they are the opposing side the player is fighting against.
Fully automating ROP is difficult, but people have written many scripts to find interesting "gadgets" that set various registers and also found useful "targets" to ROP to, such as a handful of instructions inside of most libc's system command that can yield a shell if jumped to with light constraints.
Fintech Predictions for 2021
Yeah, I think the capital investment situation has certainly improved greatly.

The labor situation is still very concerning to me. I'm sure it was awful even before uber, but there's a bit of "the devil you know" vs "the devil that will exploit you in a new and terrifying way"
Lol, now you have two problems.
Not just low latency. Without satelite-satelite communication, both grounds stations have to be able to see the same satellite.

In GEO that's not a problem - a lot of the planet is in sight. You have a ground station in New York and you can bounce off a satellite over the Atlantic and land the signal in Nigeria just fine.

With Starlink the orbits are really low, so the distance to the ground station is low. That's fine if you are in the backwoods in Washington and bounce to a receiving station 100 miles away in Seattle, it's no good if you're at sea, or (in this case) at an Antarctic station -- one which can't even see GEO satelites.
> Bandwidth still might not be great

Right, compared to reasonable in-ground ISPs.

I think Starlink sat to Starlink sat links will also help bandwidth, specifically in the case where a given downlink connection is heavily utilized, the system can shunt traffic to another slightly less ideal but less utilized ground station.

> unlocks a very financially lucrative consumer use case

That's a bingo! I think there's a pretty good chance that this could turn into a pretty epic cash cow for Starlink.
Shut up and take my money. This is the smart glasses that the world needs.
Google and Apple have inhibited the growth of the mobile app distribution market for over a decade now, and it's developers and users like ourselves that are punished to maintain their monopoly.
I also don't see how this is not corrupted to cover embarrassing or inconvenient things up by governments who have influence/infiltrate such thing.
For those interested, there are a couple of treatments available in the U.S. to slow the progression of childhood myopia. MiSight[0] contacts and low-dose atropine[1].

[0] https://www.fda.gov/news-events/press-announcements/fda-appr...
[1] https://www.aao.org/eyenet/article/how-to-use-low-dose-atrop...
Yes. It would have been useful for me. I had never come across the original (2D Euclidean) game before, so I had no idea what the game objective was, nor that I was supposed to push boxes to achieve it.
It don't think it is possible with a format like Twitter - I can imagine something like Wikipedia, but with sources limited to scientific publications, where each person improves upon a shared document.

Maybe Google wave is a better fit, allowing rich non-text items to enter it.

On Twitter you will have each person fight for their side, and you will never see a convergent product.

Of course this answer (and your question) presupposes that we are trying to achieve some form of shared consensus, whereas on Twitter, it is really two or more sides of a culture war fighting and wars are zero or negative sum games. If we are trying to find the truth I benefit even if every theory I had was wrong, because it still helped us get to the one that works, but in a war if I don't win I am sure to lose.
Since this thread has a lot of people interested in obscure/niche tech, would anyone comment on this idea:

A single eye VR/AR headset, think a Borg ocular implant, but smaller and nicer looking. With a high quality camera for see-through functionality. Used as a HUD for, well, anything. Reading web pages, Google Maps, Google Search and Assistant, notes, schedule, how to instructions, etc.

Definitely a very niche product (then again, so was Google Glass), but I would love to make one haha. Best thing is, anyone could build it using easily available components and software. https://github.com/relativty/Relativty was my inspiration, I see no reason why that wouldn't work in non-3D on a single display.

Anyone have any thoughts?

(Also, if you want to build it, hire me, I would work on this 12hrs/day for ramen money heh)
Enchroma has a product to correct for varities of color blindness, but they overall effect is still sunglasses to those looking at you.

Like anyone with a visible disability it takes education and time to normalize things, triple-so for those with disabilities that are not immediately presenting.
I can't wait for the day that business meetings take place in video games and not on the golf course
They're talking about the other end of things - the companies placing ads, not the ones hosting them.

The answer is "sleazy bottomfeeders", if the Taboola ads I've seen are any indication. Supplements, worthless insurance, colon cleansers, and the like.
It's probably the BOM cost.

I've seen the "burn up in the atmosphere" constraint before, and it struck me as a bit crazy for Shoot First and Ask Questions Later SpaceX to care about this
> [...] we’re designing Birdwatch to encourage contributions from people with diverse perspectives, and to reward contributions that are found helpful by a wide range of people.

> For example, rather than ranking and selecting top notes by a simple majority vote, Birdwatch can consider how diverse a note’s set of ratings is and determine whether additional inputs are needed before a consensus is reached. Additionally, Birdwatch can proactively seek ratings from contributors who are likely to provide a different perspective based on their previous ratings.

> Further, we plan for Birdwatch to have a reputation system in which one earns reputation for contributions that people from a wide range of perspectives find helpful.

https://twitter.github.io/birdwatch/about/challenges/
Taken to the extreme, you have ROP: https://hovav.net/ucsd/dist/geometry.pdf
Over the past two years of bootstrapping Saasify, here's a breakdown of all the feedback I've received from various VCs.

I think case studies like this are important, especially for less successful startups to avoid survivorship bias.

Don't worry -- this is not a startup pitch. It's actually kind of the opposite.
NASA runs satellites for this purpose, TDRS, in GEO. But they're for NASA use only, so SpaceX only gets them on Dragon flights (and maybe other NASA payloads.)
I literally own a pinephone so dont misunderstand me as disagreeing, but you could always just stay on Android and use F-Droid.
The mobile app distribution market really needs some disruption.
The mRNA Tech Behind the Covid-19 Vaccines
Machine Learning Mastery has working code samples. That already puts it in the top 1% from my perspective and I definitely relied heavily on Jason's blog posts while doing my NLP masters.

He definitely has a far more commercial focus than many other bloggers but this seems a bit too critical to me.
Well, obviously. If it were a dumb profanity filter then it would be possible to fix it!
> Your app contains content that doesn't comply with the Sexual Content and Profanity policy.

What the fuck is "profanity"? Are we a religious society? Why shouldn't we able to say "ass" (!) or show nipples??

The ban on porn is defensible outside of any moral framework because once you allow porn then all what's left is porn (although it would be useful to think about why that is).

But "profanity"? Come on.
Lol that's not true.
Names to Avoid in Software Engineering
I referenced this in my other reply, but this is one of the ones that blew my mind:

https://www.washington.edu/news/2019/07/01/play-a-video-game...
You could replace “the tech industry” with “capitalists” and it would only gain in correctness. There is no market incentive to be “good” past a certain size, and plenty of incentives to be “evil”.
Apple at least keep your app up, and it's obvious there's a human on the other end. The responses are usually pretty quick (often within minutes if you reply straight away), and you can pinky-promise to fix the issues in the next release if it's an update.
“Had to” and she just replied on Twitter with some odd assumptions are very different. I think anyone would agree that a test that is wrong half the time is not a good test.
> This is something that has been studied pretty extensively. If it was actually a cure, it'd have been well-proven by now, and we'd all be doing it.

Untrue and faulty reasoning. It may have been studied extensively on biased populations, or the research may not have been funded adequately. Anyways, this is part of the "myopia is purely genetic" zeitgeist which is shoved down all of our throats in the west. Meanwhile, studies from Taiwan, Japan, and Korea show that myopia truly has an environmental component to it, e.g. childhood eyestrain and video games.

One may argue that could be because East Asian genetics are different from those of Europeans. I can't say exactly why, but I will say that the mainstream "myopia can't be cured/prevented" rhetoric has been extremely harmful for approximately 2 billion people on this planet.
Back in the day we used the half height Sony Vaios a lot for stuff like this. Unfortunately I think Sony stopped making those about a decade ago.
Having a microphone to detect broken glass is very much not obvious. As someone completely unfamiliar with the problem space, I would have assumed the normal solsolution was something along the lines of: run a current throught the glass and check the voltage "drop".
Worse, if the 40% are more enthusiastic about spreading their viewpoint than the 60% are about spreading the truth, then social media may have a majority of posts supporting the falsehood.
Reliable taxi services are only commodities in a few large, rich, well-regulated places (and there are plenty of large and rich places where they're not, to this day!)

I currently live in one of the wealthier western european countries, and when I need to go to/from an airport, I have a particular guy I call. He'll usually in turn call someone else in his network of drivers, and someone impeccably professional (maybe with a beard, but always in a suit) will show up in a new E-class (or better) with perfect reliability. There's never any fuss, the price is fixed beforehand - never surge pricing - and at about 50% more than the cheapest possible non-refundable pre-paid shuttle service, I consider it well worth the cost. Any random taxi here, by contrast, will be a ripoff at best and frequently unreliable.

Almost* everywhere I've lived I've sought out and patronized "a guy" like this. In some (not rich, not western) places it's been a solo operator with his own car. In others maybe a bit more professionalism in terms of having a business name and business cards (i.e. a car service, but not a big name one). I'll take "a guy" over Uber or (god forbid) the local taxi mafia every time.

Commodity taxis are shit. Repeat business builds trust.

*- I never found "a guy" in Seattle. Fuck Orange Cab and STITA. And for plenty of other reasons, fuck Uber.
And, if your hardware supports it, PAC and shadow stacks can help protect your return addresses too.
This was required reading in my university's CS program.
> it was literally hilarious to me that the same people who were arguing "marriage was only a piece of paper" in their own lives suddenly turned around and became strict advocates of it in the lives of a small minority of people

Empathy. What you're describing your shocked reaction to is empathy in others. This says a lot about you.
if that's a problem then your parents should have a gas or diesel powered generator anyway, which could charge the car in an emergency
Stonks: $GME, $BB, $AMC, Cryptos and Mining: $FIRO, $Nim, $DOT
I gotta say, rowing had zero appeal for me until I got into HIIT (F45).

Even though I have been using it for three years, I would still say it is the most punishing/rewarding piece of equipment at my gym, and probably the only one that is still capable of leaving me (literally) breathless.

I've been thinking about getting a rowing machine for home just for some quick two-minute bursts of cardio to break up my sitting, so this might be a worthwhile purchase when I can budget it in. Also my wife has been looking to buy a Peloton so maybe I can convince her to get this instead. :)
A day or two if you're lucky. If you happen to have corneas like mine, you'll get about 9 hours before suffering a fast decline:

https://news.ycombinator.com/item?id=21546732

No lasting bad effects for me, at least. I'm still glad I tried it.
How do you suggest they recoup the losses that come with developing and maintaining entire ecosystems of power-efficient operating systems and mobile devices?
I'm not doubting you but if you have a source for this (Hebrew is fine) I'd appreciate it. This topic has come up in conversation before and I'd like some more info on this.
The "myopia is purely genetic" zeitgeist has been continually shoved down all of our throats in the west. Meanwhile, studies from Taiwan, Japan, and Korea show that myopia truly has an environmental component to it, e.g. childhood eyestrain and video games. It's also undeniable that myopia manifests more in middle class workers than working class, which indicates some sort of systematic environmental component.

Since the article is specifically about Japan and Asian markets, I must add this: One may argue that the discrepancy in mainstream scientific conclusions could simply be due to differences in genetics between East Asians and Europeans. This mainstream "myopia can't be cured/prevented" rhetoric has been extremely harmful for approximately 2 billion people on this planet.
even just the ability to hop 1 satellite can greatly extend the range of one spacex earth station. right now, as the parent poster mentions, the moving LEO satellites need to be simultaneously in view of the CPE antenna and a spacex earth station.

and also relatively overhead of the CPE antenna, since the starlink customer terminal is a phased array that does dual beamforming in a 'cone' of view directly above it. just because a satellite is visible 5, 10 or 15 degrees above the horizon from the POV of the CPE doesn't mean it can talk to it. the system is definitely reliant upon a fairly high satellite density.

with the ability of the satellite that's generally overhead of a starlink earth station to talk to the satellites immediately behind, and preceding it in its orbital plane, and then those two additional satellites to talk to the CPEs underneath them, the possible coverage area can be greatly increased.

3D visualization of starlink orbits and coverage footprints:

https://satellitemap.space/
I once started a social network around car culture. It did OK, and we got an exit offer, but decided to pivot to something else (which was the right move).

Anyways, the way we got our early users was nontraditional. We went in person to car shows, took pictures of the cars, making sure one of them was with a polaroid camera. We then handed the Polaroid to the owner of the car and asked if we could feature their car on our website. If they said yes, we wrote out a email/pass on the back of the polaroid and then went home and set up their account. This seeded our original social graph.

Harder to do these days, but don't forget about your legs. It's a lot easier to convince people in person than over a rote email.

We got on Techcrunch as well, but it didn't help nearly as much. Techcrunch is mostly good for the inner industry[0]

[0]: https://techcrunch.com/2006/06/11/cnet-veterans-launch-boomp...
>Outside of optimal operation, specially during the start, this would actually be an advantage of electric motors?

When you say "this" do you mean "having more low-end torque than a gasoline motor"?

In theory, you could tune your prop governor to take a bigger "bite" of the air at low airspeed and thus perhaps get better acceleration and a shorter takeoff roll. But aircraft performance is very rarely limited by the torque output of the engine itself. Usually the driveshafts and gearboxes are the limiting factors in power/torque transmission.
I have a Gemini also, and have backed the Astro Slide. However, I think the Gemini fits in that very awkward space where the keyboard is too small to touch type on, yet too big to use in handheld mode. I much prefer the slide out keyboard on the Nokia N810 (but still wouldn't be able to "code" on it).

The best micro keyboard I've ever typed on is an Apple Newton keyboard that I interfaced with a Palm Pilot. The key spacing is 90% of a regular keyboard, which is about the smallest I can go and still touch type. I really wish I had a modern day portable device with this keyboard form factor.
The 1,000mph land-speed-record project is up for sale, again
I have bad nearsightedness, and anecdotally if I go without my glasses for awhile, such as when swimming at the beach, my eyesight has improved somewhat by the end of the day. I think it is a combination between using my eye muscles more effectively and learning to better infer what the blobs are.
We can all agree that chocolate is the best form of ice cream. Those who would disagree are obviously trolls spreading disinformation. The marketplace of ice cream can't function if we have other flavors like pistachio or strawberry being labeled "best" instead of the only truely best ice cream. Obviously these strawberry promoters are just manipulating other gullible ice cream consumers for their own ends.
That sounds interesting, is this a case of 200 vulnerabilities being found or 200 documented cases of attacks against (production?) devices?
Apple now takes a 15% fee and has a really good review process (updates are reviewed by humans within a day or two)
There's a lot of reasons. Building a closed guarden that locks people in feels a lot safer from a competition standpoint than the alternative, if you can make it hard to steal your customers and only a few (always remember that being on and reading HN means you're not much of an average user), it's also just easier than being open, a closed system can make changes much faster than an open one that has to get concensus before adding a new feature for example.

In this specific case and most of the time where Google's complete lack of support shows up it's because having manual review costs money and the process that screws the app developer is easier than having a secondary process that needs more people to decide if the first automated or rote manual scan made a mistake.
> That said, strain on the kube-scheduler is spiky. A new job may consist of many hundreds of pods all being created at once, then return to a relatively low rate of churn.

Last I checked, the default scheduler places Pods one at a time. It might be advantageous to use a gang/batch scheduler like kube-batch[0], Poseidon[1] or DCM[2].

Edit: looks like they're already investigating that approach --

> We tried a few things needing a custom scheduler, but ran into edge cases that caused conflicts with how normal pods were scheduled. Kubernetes 1.18 introduced a plugin architecture for the core Kubernetes scheduler, making it much easier to add features like this natively. We recently landed on the Coscheduling plugin as a good way to solve this problem.

[0] https://github.com/kubernetes-sigs/kube-batch

[1] https://github.com/kubernetes-sigs/poseidon

[2] https://github.com/vmware/declarative-cluster-management
They would never implement it because there is no valid signal here. The vast majority of users would just thumbs down every ad they see because they believe that will result in less ads.

Go check out the messaging around Ad Choices and how poorly it ended up working.
Do you mean all those channels that have been demonetized and have Patreon accounts?

And if this really is the case then stop complaining about it.
I wonder if you could make a dummy app (a canary), submit it, and use that to test if your metadata is acceptable?
Get your stuff working on Concept IIs as well as your own ergometers. Just do it. Seriously. If your subscription business depends on selling your customers your own ergometer first, you'll have a very steep barrier between you and success.

Recent models of the C2 monitor have connectivity features.

There's an opportunity for remote-community features for indoor rowing like what Zwift offers for biking. And you won't have to deal with shipping heavy stuff to every customer before they subscribe.
I just want to point out that Minds[1] has a pretty clever content moderation policy that involves an appeal process with randomly selected users of the platform making blind judgements.

I haven’t been part of the process myself, nor have I used the platform yet at all. But this feature sounds quite good in theory.

[1]: https://www.minds.com/content-policy
How regrettable that the document has no named author, other than the official sponsor. The advice stands or falls without it, still one would like to know the name of the one who advocated so well for clear writing.
For the record, welcome to San Francisco. (a joke, it's the similar here)
Can you clarify bat wings? Are they sinilar to YTWLs? When I google, all I find are Moms trying to get Michele Obama arms.
My point is that they are obviously intending to go after both business and payments. If there is a gap it’s not because they don’t want to go there. If you’re judging them on what you can use now then you’re discounting a massive intent for change and a lot of money to make it happen.

Feel free to revisit this in 24 months. Facebook cannot afford to leave WhatsApp in an easily copied state.
It's fluctuated from -4.5 to -2.5 over the years. Currently on the better end I think, but I haven't been to an exam in a long while. I have friends with lower than -5 and from trying on their glasses, I would also wear them if my vision was that bad. Even at -4.5 the only major annoyances were street signs and confusing people from far away though.
BELTALOWDA!!!

https://www.youtube.com/watch?v=cnpQCIDePh8